Overview

overview

10

Static

static

3

174e374ba0...18.exe

windows7-x64

10

174e374ba0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    174e374ba051fd69d6cfc15f0c7c4333_JaffaCakes118

  • Size

    528KB

  • Sample

    240627-yjm5hazdjk

  • MD5

    174e374ba051fd69d6cfc15f0c7c4333

  • SHA1

    3235f3da2fc9f7294033caa06b2b23b0e855cae6

  • SHA256

    a6b1433d5eb3cb2da2ac105facbbf9710be85fed5879c2f6e41995da3dcc343c

  • SHA512

    bcd30f034d3734cb8b535d6dc603cff6615b44f3278090eda5e6b0058a975009c7db2ff9b56c1db6e4ec0e715df0d82785dc70389af99518e0d3c1edca5b6537

  • SSDEEP

    3072:aK5rI0MAfDbj7dSKOSdFIq4fD/1HrugZjyOM3gf9C7XKhj7:PXpaLxrVZjs3gFCjK

Score
10/10
isrstealerevasionstealertrojan

Malware Config

Targets

    • Target

      174e374ba051fd69d6cfc15f0c7c4333_JaffaCakes118

    • Size

      528KB

    • MD5

      174e374ba051fd69d6cfc15f0c7c4333

    • SHA1

      3235f3da2fc9f7294033caa06b2b23b0e855cae6

    • SHA256

      a6b1433d5eb3cb2da2ac105facbbf9710be85fed5879c2f6e41995da3dcc343c

    • SHA512

      bcd30f034d3734cb8b535d6dc603cff6615b44f3278090eda5e6b0058a975009c7db2ff9b56c1db6e4ec0e715df0d82785dc70389af99518e0d3c1edca5b6537

    • SSDEEP

      3072:aK5rI0MAfDbj7dSKOSdFIq4fD/1HrugZjyOM3gf9C7XKhj7:PXpaLxrVZjs3gFCjK

    Score
    10/10
    isrstealerevasionstealertrojan

    • ISR Stealer

      ISR Stealer is a modified version of Hackhound Stealer written in visual basic.

      trojanstealerisrstealer

    • ISR Stealer payload

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks